From 721d5ade3f25c46a802b5016943c90db494e2f89 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 24 Aug 2016 01:30:32 +0100 Subject: [PATCH] Give the LowestLayer a proper name in the interim configs, and ensure it's in the stack. --- volatility/framework/automagic/stacker.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/framework/automagic/stacker.py b/volatility/framework/automagic/stacker.py index d1f6b16d2..95edc4211 100644 --- a/volatility/framework/automagic/stacker.py +++ b/volatility/framework/automagic/stacker.py @@ -26,7 +26,7 @@ class LayerStacker(interfaces.automagic.AutomagicInterface): self.local_store = self.location.path new_context = context.clone() - current_layer_name = context.memory.free_layer_name() + current_layer_name = context.memory.free_layer_name("FileLayer") current_config_path = interfaces.configuration.path_join("automagic_general", current_layer_name) # This must be specific to get us started, setup the config and run new_context.config[interfaces.configuration.path_join(current_config_path, "filename")] = self.local_store @@ -34,7 +34,7 @@ class LayerStacker(interfaces.automagic.AutomagicInterface): # Repeatedly apply "determine what this is" code and build as much up as possible stacked = True - stacked_layers = [] + stacked_layers = [current_layer_name] stack_set = sorted(volatility.framework.class_subclasses(interfaces.automagic.StackerLayerInterface), key = lambda x: x.stack_order) while stacked == True: